agentradar-cli 0.3.12 → 0.3.13

package/dist/channel.js

@@ -7,7 +7,7 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 import { createInterface } from "node:readline";
 import { awpEndpoint, envValue } from "./tool-run.js";
-import { noteCliUpdate } from "./update.js";
+import { noteCliUpdate, refusedLine } from "./update.js";
 import { trustedMcpEndpoint } from "./setup.js";
 import { syncJoinedSkills } from "./skill-install.js";
 export const CHANNEL_GUIDANCE = "AgentRadar channel messages carry your new events in full, in order, one per line, each with its own next step: act on each line as it says. Run `agentradar run $AR_CLI_RUNNER_ID inbox next` only when a channel message tells you to. Answer a liveness check with `agentradar run $AR_CLI_RUNNER_ID liveness_ack --nonce <nonce>`. Never acknowledge an event you have not read. Never poll on your own or keep a loop running: when a channel message arrives, drain it, then end your turn. Only you reply or act as this agent: a sub-agent or teammate returns its result to you, and you send it.";
@@ -143,12 +143,12 @@ export async function startChannel(runnerId, deps = {}) {
         await noteCliUpdate(response.headers, logError);
         if (!response.ok) {
             const said = await response.json().then((body) => body.error?.message).catch(() => null);
-            throw new Error(said ?? `AgentRadar refused the channel call (${response.status})`);
+            throw new Error(said ?? refusedLine("the channel call", response.status));
         }
         const text = await response.text();
         const json = text.trim().startsWith("{") ? text : text.split("\n").find((line) => line.startsWith("data:"))?.slice(5);
         if (!json)
-            throw new Error("Invalid AgentRadar MCP response");
+            throw new Error("AgentRadar answered the channel call with no JSON-RPC body. Nothing was done. Now: run `agentradar upgrade`, then restart the channel.");
         return JSON.parse(json);
     };
     const next = (args = {}) => remote("tools/call", { name: "next_event", arguments: { ...args, sessionId } });

package/dist/runner.js

@@ -6,7 +6,7 @@ import { fileURLToPath } from "node:url";
 import { promisify } from "node:util";
 import { claimPendingJoin, removeAgentService, shellValue, trustedMcpEndpoint, writePrivateFile } from "./setup.js";
 import { callAwpTool, envValue } from "./tool-run.js";
-import { cliHeader, installedVersion, noteCliUpdate, revertCli, runningVersion, selfUpdate } from "./update.js";
+import { cliHeader, installedVersion, noteCliUpdate, refusedLine, revertCli, runningVersion, selfUpdate } from "./update.js";
 const RUNNER_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
 const ENGAGEMENT_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 // Per-hire bearers are ordinary agent keys (`pcp_…`); the runner's own is an AWP key (`ar_…`).
@@ -332,7 +332,7 @@ export async function startVendorRunner(runnerId, home = homedir(), deps = {}) {
         const claim = async () => {
             const response = await post("agent-hires/bearers/claim");
             if (!response.ok)
-                throw new Error(`claim refused (${response.status})`);
+                throw new Error(await response.json().then((b) => typeof b.error === "string" ? b.error : null).catch(() => null) ?? refusedLine("the hire claim", response.status));
             const { hires: claimed } = await response.json();
             const written = [];
             for (const hire of claimed) {

package/dist/secrets.js

@@ -15,7 +15,7 @@ import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { awpRequest, envValue } from "./tool-run.js";
-import { cliHeader, noteCliUpdate } from "./update.js";
+import { cliHeader, noteCliUpdate, refusedLine } from "./update.js";
 export const SECRETS_FILE = join(".agentradar", "secrets.enc");
 export const SECRETS_USAGE = "Usage: agentradar secrets pull|renew|env <runner-id> | agentradar secrets exec <runner-id> -- <command> [args...]"
     + " | agentradar secrets upload <runner-id> --env-file <path> | --from-env <NAME,...> | --prompt <NAME> [--only <NAME,...>] [--replace --approval-details '<json>'] [--token <token>]"
@@ -40,7 +40,7 @@ async function post(runnerId, path, body, deps) {
     await noteCliUpdate(res.headers, deps.logError);
     const json = await res.json().catch(() => ({}));
     if (!res.ok)
-        throw new Error(json.error ?? `AgentRadar answered ${res.status}`);
+        throw new Error(json.error ?? refusedLine("the secrets request", res.status));
     return json;
 }
 /**

package/dist/setup.js

@@ -924,9 +924,10 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
     };
     const restartInPlace = (runnerId) => {
         const config = join(home, ".agentradar", "config", runnerId);
-        return `restart your agent ONCE with these flags added to its own launch command (keep what it already has, including --continue):
-  --mcp-config ${join(config, "awp-only.json")} --dangerously-load-development-channels server:agentradar --settings ${join(config, "agentradar-settings.json")}
-and AR_CLI_RUNNER_ID=${runnerId} in its environment. Accept the one-time development-channel prompt when it appears. To stop: agentradar leave ${runnerId}, then drop those flags.`;
+        const sh = (v) => /^[\w@%+=:,./-]+$/.test(v) ? v : `'${v.replace(/'/g, "'\\''")}'`;
+        return `restart your agent ONCE with this one command, which already keeps your conversation (--continue); if you normally launch claude with other flags, add them:
+  env AR_CLI_RUNNER_ID=${sh(runnerId)} claude --continue --mcp-config ${sh(join(config, "awp-only.json"))} --dangerously-load-development-channels server:agentradar --settings ${sh(join(config, "agentradar-settings.json"))}
+Accept the one-time development-channel prompt when it appears. To stop: agentradar leave ${sh(runnerId)}, then launch without those flags.`;
     };
     const installService = deps.installService ?? ((id) => installAgentService(id, home, env));
     const connected = (runnerId, projectPath, approvedBypass, bypass) => {

package/dist/tool-run.js

@@ -2,7 +2,7 @@ import { mkdir, readFile, realpath, stat, utimes, writeFile } from "node:fs/prom
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { hostIsTeammate } from "./channel.js";
-import { cliHeader, noteCliUpdate, withCliUpdate } from "./update.js";
+import { cliHeader, noteCliUpdate, refusedLine, withCliUpdate } from "./update.js";
 const UNAUTHORIZED = "AgentRadar refused the tool call (401): this agent's key is no longer valid on this server (it was revoked, or the hire it was issued for has ended). Nothing was done. Stop calling tools with this key and tell the human who runs you.";
 /**
  * One `KEY='value'` line as `setup.ts` wrote it, single-quoted with `'` escaped as `'\''`.
@@ -657,7 +657,7 @@ async function postAwp(url, bearer, method, params, deps) {
     if (!response.ok) {
         // 426 says how to upgrade; 401 says why the key was refused and how to re-join.
         const said = await response.json().then((body) => body.error?.message).catch(() => null);
-        logError(said ?? (response.status === 401 ? UNAUTHORIZED : `AgentRadar refused the tool call (${response.status}).`));
+        logError(said ?? (response.status === 401 ? UNAUTHORIZED : refusedLine("the tool call", response.status)));
         return null;
     }
     const body = await response.json();

package/dist/update.js

@@ -21,6 +21,21 @@ export const runningVersion = async () => JSON.parse(await readFile(join(PACKAGE
  * and as `x-agentradar-surface` so it can count which client a call came from (MCPR-1).
  */
 export const cliHeader = async (surface = "cli") => ({ "x-agentradar-cli": await runningVersion().catch(() => ""), "x-agentradar-surface": surface });
+/**
+ * CLI-VERSION-GATE (Vadym 12835): the server names its newest CLI on every reply (`x-agentradar-cli-latest`). When this one
+ * is behind, the command prints ONE warning line on stderr and its JSON output carries `cliUpdate` (`withCliUpdate`).
+ * A CLI below the server's minimum is refused with 426 and the same command, so an agent can always fix itself.
+ */
+/**
+ * Agent's-eye (Vadym 13105): a bare status says nothing. A refusal the server gave no sentence for names what was refused,
+ * says nothing was done, and the one step to take. A 401 means the key is no good here; a 429 or 5xx means the server is busy or
+ * down (an upgrade would not help: wait and retry); any other status may be an old CLI.
+ */
+export const refusedLine = (what, status) => status === 401
+    ? `AgentRadar refused ${what} (401): this agent's key is not valid on this server. Nothing was done. Now: tell the human who runs you, then run \`npx agentradar run <join-link>\` with the new join link they give you.`
+    : status === 429 || status >= 500
+        ? `AgentRadar is unavailable for ${what} (${status}). Nothing was done. Now: wait a minute and run the same command again; if it still fails, tell the human who runs you.`
+        : `AgentRadar refused ${what} (${status}) and gave no reason. Nothing was done. Now: run \`agentradar upgrade\`, then run the same command again; if it is refused again, tell the human who runs you.`;
 let behind = null;
 export const forgetCliUpdate = () => { behind = null; };
 export async function noteCliUpdate(headers, logError = console.error) {

package/dist/vendor-runner/session-frame.mjs

@@ -57,12 +57,15 @@ const NO_TEXT = (run, source, turn, evId) => {
 /**
  * FRAME-CATCHUP-STRUCTURED: the catch-up step, built only from next_event's structured `catchUp` (catch-up.ts CatchUp) and never from
  * guidance text, where a name or title could forge a "Now: catch up" line (qa-sec MED #2679). Only counts, a normalized time, this
- * wake's own conversation id and a base64url cursor reach the text, so nothing in it can carry a command. Mirrors catchUpLine.
+ * wake's own conversation id, a base64url cursor and, per file, its plain-character name and type and a plain id reach the text,
+ * so nothing in it can carry a command. Mirrors catchUpLine.
  */
 function catchUpStep(c, conversationId, run) {
   const count = (v) => Number.isSafeInteger(v) && v >= 0 ? v : null;
   const total = count(c?.newMessages), nonMembers = count(c?.nonMembers) ?? 0, edited = count(c?.edited) ?? 0;
-  if (!total || /["`$\\]/.test(conversationId)) return null;
+  const slack = slackThreadStep(c?.slackThread, total ?? 0, c?.more === true, run);
+  if ((!total && !slack) || /["`$\\]/.test(conversationId)) return null;
+  if (!total) return `Now: read this thread first, then act on it.${slack}`;
   const seen = c.lastAckAt && !Number.isNaN(Date.parse(c.lastAckAt)) ? new Date(c.lastAckAt).toISOString().slice(0, 16).replace("T", " ") : null;
   const after = typeof c.readHistoryAfter === "string" && /^[A-Za-z0-9_-]+$/.test(c.readHistoryAfter) ? c.readHistoryAfter : null;
   const n = `${total}${c.more === true ? "+" : ""}`, one = total === 1 && c.more !== true;
@@ -73,7 +76,33 @@ function catchUpStep(c, conversationId, run) {
     ? ` ${edited === 1 ? "One of them is a message" : `${edited} of them are messages`} you had already seen that the sender EDITED or deleted since: `
       + `an edited line is marked "(EDITED <time> ...)" and a deleted one is no longer listed. Answer from the new text, never from the version you read before.`
     : "";
-  return `Now: catch up with the thread first (${what}${strangers}) with ${how}, then act on it.${edits}`;
+  return `Now: catch up with the thread first (${what}${strangers}) with ${how}, then act on it.${edits}${catchUpFiles(c.attachments, run)}${slack}`;
+}
+
+/** SLACK-THREAD-BACKFILL: catch-up.ts slackThreadText, byte for byte; the ids are re-checked here so only Slack-shaped ids reach the text. */
+function slackThreadStep(t, held, more, run) {
+  if (!t || !/^[CG][A-Z0-9]{2,20}$/.test(String(t.channel)) || !/^\d{10}\.\d{6}$/.test(String(t.threadTs))) return "";
+  const has = held ? `${held}${more ? "+" : ""} earlier message${held === 1 && !more ? "" : "s"} of it so far` : "none of its earlier messages yet";
+  return ` This Slack thread began before you were tagged in it, and your Inbox holds ${has}.`
+    + ` Read the whole thread from Slack now: \`${run} slack_history --args '{"channel":"${t.channel}","threadTs":"${t.threadTs}"}'\`;`
+    + ` for more context, read the channel around it with the same command without "threadTs".`
+    + ` Slack gives 15 messages and about one read a minute: pass the "nextCursor" it returns as "cursor" for the next 15, and if it answers "ratelimited", wait a minute and run it again.`;
+}
+
+/** ATTACHMENT-MARKER: the files in the catch-up, as catch-up.ts catchUpFilesText writes them (kept byte for byte by catch-up-cta-realpg). */
+function catchUpFiles(files, run) {
+  if (!Array.isArray(files) || !files.length) return "";
+  const plainId = (v) => typeof v === "string" && /^[\w-]{1,256}$/.test(v);
+  const sizeText = (n) => typeof n !== "number" || !Number.isFinite(n) || n <= 0 ? "" : n < 1024 ? `${n} B` : n < 1048576 ? `${(n / 1024).toFixed(1)} KB` : `${(n / 1048576).toFixed(1)} MB`;
+  const list = files.slice(0, 5).map((f, i) => {
+    const name = String(f?.name ?? "").replace(/[^\p{L}\p{N} ._'-]/gu, "").slice(0, 60).trim();
+    const kind = String(f?.kind ?? "").split(";")[0].replace(/[^\w/+.-]/g, "").slice(0, 60) || "file";
+    const cmd = plainId(f?.eventId) && plainId(f?.id) ? ` - download: \`${run} download_attachment --args '{"eventId":"${f.eventId}","attachmentId":"${f.id}"}'\`` : "";
+    return `[Attachment ${i + 1}: ${kind}${name ? ` "${name}"` : ""}${sizeText(f?.size) ? ` ${sizeText(f.size)}` : ""}${plainId(f?.id) ? `, id ${f.id}` : ""}]${cmd}`;
+  }).join(" ");
+  const more = files.length > 5 ? ` and ${files.length - 5} more (\`${run} read_history\` lists each with its command)` : "";
+  return ` ${files.length === 1 ? "One of them carries a file" : `They carry ${files.length} files`}: ${list}${more}. `
+    + `MUST download a file before you answer anything about it (a photo or document someone "posted above" is one of these); a message with no caption is not an empty message.`;
 }
 
 const NO_REPLY_SOURCES = new Set(["moderator", "approval", "agentradar", undefined, null, ""]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "engines": {
     "node": ">=20"
   },